Manifest

$ rpki-client -vvf rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
File:                     dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft (raw, json)
Hash identifier:          BUDBjPCtnlv+HL8rNf1bQfPvAvDWoJRgH86nvpxtxN4=
Subject key identifier:   FA:0B:E0:C1:53:B2:EE:D8:BB:D1:7A:55:05:AF:9A:7B:CF:E5:7A:9F
Authority key identifier: 76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69
Certificate issuer:       /CN=A9180DF5/serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
Certificate serial:       0691
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
Manifest number:          068E
Signing time:             Wed 18 Feb 2026 21:50:03 +0000
Manifest this update:     Wed 18 Feb 2026 21:50:02 +0000
Manifest next update:     Wed 25 Feb 2026 21:50:02 +0000
Files and hashes:         1: dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl (hash: kZvChxETtVlkXfo0Dg5af0/y7n+5QLDpbMGBKVQd1Pw=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl
                          rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Wed 25 Feb 2026 21:50:02 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 1681 (0x691)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A9180DF5, serialNumber=7678625D9154FCDF1B000A43D1F892FB1D588369
        Validity
            Not Before: Feb 18 21:50:02 2026 GMT
            Not After : Feb 25 21:50:02 2026 GMT
        Subject: CN=6996340a-2611
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:0e:99:ad:0c:91:3f:d3:f4:69:a2:0c:b9:09:
                    98:ab:d9:d4:d5:8b:12:52:56:c2:87:bb:12:5c:e3:
                    da:48:0e:e1:29:5a:11:5b:8f:6c:92:4c:ce:a3:e6:
                    d2:ef:0d:ce:e2:09:f4:f3:ff:ff:4d:bc:9d:db:24:
                    36:1f:92:ee:de:55:59:17:02:7f:ff:0e:15:ff:5e:
                    e3:e8:f2:da:d2:11:29:7e:88:4a:29:5b:75:76:2e:
                    95:82:e6:f0:36:30:3d:fe:1b:ba:cf:5d:42:0e:12:
                    48:46:0a:78:27:cb:75:fa:22:a4:d9:82:99:4c:8a:
                    fc:fa:3c:22:94:8d:89:3b:97:5e:bd:42:eb:5d:b0:
                    6c:81:ba:c6:02:1f:ee:af:65:eb:b2:08:e3:26:9b:
                    73:26:91:9b:64:3a:e5:ac:5a:54:f3:1c:b9:18:ec:
                    9e:1f:c2:6c:4d:df:b3:52:a8:80:5f:c8:7c:8a:d5:
                    03:43:8f:5f:e8:17:e6:75:1a:53:b8:0a:df:32:48:
                    71:4f:21:6c:75:ef:18:bf:71:27:75:5f:b8:2c:de:
                    57:07:6e:6b:82:a0:97:e0:8c:0f:ec:1d:5c:e5:d1:
                    26:9d:d3:01:6b:ff:c1:5f:a1:1f:32:ca:49:37:c9:
                    77:dd:48:7e:d9:e4:78:2a:83:d1:55:64:89:b9:5b:
                    e9:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FA:0B:E0:C1:53:B2:EE:D8:BB:D1:7A:55:05:AF:9A:7B:CF:E5:7A:9F
            X509v3 Authority Key Identifier:
                keyid:76:78:62:5D:91:54:FC:DF:1B:00:0A:43:D1:F8:92:FB:1D:58:83:69

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/dnhiXZFU_N8bAApD0fiS-x1Yg2k.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A9180DF5/F4FD227AA63211EBB3E17969C4F9AE02/dnhiXZFU_N8bAApD0fiS-x1Yg2k.mft
                RPKI Notify - URI:https://rrdp.apnic.net/notification.xml

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         47:b3:34:be:85:a0:65:dd:a5:f1:11:4b:d6:59:bc:af:ba:47:
         2d:33:27:f5:dd:20:13:fb:3a:65:79:45:81:fc:f6:d8:05:64:
         28:40:29:00:16:98:b9:e6:d6:04:fd:02:59:f3:fd:e6:ae:a7:
         0a:41:bd:76:2a:4d:58:8a:13:09:e8:11:0e:8e:da:ba:bf:ff:
         af:24:12:8b:59:9e:e2:9a:82:c2:fb:ad:81:70:8c:83:1c:74:
         7c:ad:1e:ac:ca:ed:38:3b:02:a7:65:e5:c0:1b:4c:69:10:d7:
         2b:c4:77:ac:e5:b1:be:9e:a5:30:11:34:93:df:fe:3e:d0:0b:
         ff:15:1f:b3:d8:1f:d7:b9:e3:b1:f3:d9:8e:99:ab:d2:99:d9:
         55:86:67:b6:a6:46:ba:e4:60:d6:9e:20:d5:53:03:00:04:b3:
         81:c6:0b:c8:05:8c:e4:2a:8e:58:14:2d:b7:7f:7a:51:b5:36:
         16:86:5f:68:dd:c9:24:e2:8c:66:9c:66:91:91:55:93:64:fb:
         2c:62:e7:3b:46:80:25:5d:86:e9:e5:d2:2f:37:47:ae:1a:95:
         52:c5:3c:b9:d4:ac:3f:da:7e:0f:ca:9d:fc:7f:9f:85:2a:8a:
         4b:0c:38:dd:9a:c5:72:c6:25:6d:4a:8f:39:1b:e3:0e:bd:f8:
         27:e5:5b:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Feb 19 19:01:39 2026 by rpki-client